From the crypt to the code: Web security explored through horror movies
summary
Maps OWASP Top 10 failures to horror beats and gives concrete defenses: Broken access control — deny by default, minimal privilege, short JWTs + refresh tokens and regular invalidation; Cryptographic failures — classify data, encrypt everything, use TLS with modern ciphers, avoid storing unnecessary secrets; Injection — server-side validation, escaping, use DOMPurify or sanitize-html and limit SQL privileges/queries; Outdated dependencies — remove unused libs, sign packages, run OWASP Dependency-Check or retirejs and enable Dependabot. Examples pair each risk with the exploit and a practical mitigation.
AI-written summary · about
chapters (7)
- 0:00Introduction horror parallels
- 1:03OWASP Top Ten overview
- 3:07Broken access control
- 10:16Cryptographic failures
- 13:35Injection vulnerabilities
- 18:35Outdated dependencies risks
- 21:48Security best practices summary
related talks
33mFrom the crypt to the code Web Security Explored Through Horror Movies
34mWeb security explored through horror movies
01h 02mUnderstanding the OWASP Top 10
01h 30mCommon Webapp Vulnerabilities and What to Do About Them
53mOWASP Top 10: What are them and how to prevent them
59mPractical Security for Web Applications
01h 00mWeb Application Security Risks: A Look at OWASP Top Ten 2017
59mSecuring the Digital Landscape: A Deep Dive into OWASP Top 10 for Applications, APIs, and LLMs